Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa
File: 9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa (raw, json)
Hash identifier: 1KecAl4TWVbNvcSDQsgVTCPMH2NrZ6+asA8vgdMUPBk=
Subject key identifier: 5F:64:61:04:59:30:BA:37:93:3C:AD:97:CD:83:D6:12:2B:DA:A6:53
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BA518BD09F6356F22F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 36619
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ba:51:8b:d0:9f:63:56:f2:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=32b2bda9-39e2-46a7-8520-8b05d31719f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:9e:01:f6:1d:9b:b9:99:d3:4e:8a:1b:e7:
93:7d:9a:d5:d5:d1:d2:37:b3:77:e7:26:a0:50:b1:
fc:04:6e:6a:67:00:15:a5:66:f4:1c:4b:9b:48:d6:
26:7f:af:19:17:6c:e9:7b:57:63:a2:95:00:54:da:
57:7a:d7:65:7a:93:43:c7:9b:c9:a8:77:cd:c8:bc:
2d:3a:45:53:89:a4:07:45:54:c8:33:ea:35:27:ce:
00:6b:59:84:d8:66:cc:54:6f:e2:92:e2:81:11:c9:
37:86:57:23:c3:a0:0b:f6:9f:2c:6f:9b:e1:4a:9b:
56:05:36:63:c7:92:61:37:83:0e:35:68:c7:28:02:
8f:ef:ce:5b:51:50:b8:e6:7b:a1:fb:4f:03:77:2c:
7f:df:29:71:cf:71:32:45:95:ef:b9:62:53:92:21:
c2:ca:3b:2e:d6:29:72:09:b4:b5:06:f1:1f:20:9c:
54:c4:a4:1d:0f:ad:e0:d6:7f:72:b4:95:c0:5c:43:
ee:7e:98:ae:30:29:cb:da:41:1d:fd:d8:28:14:a9:
64:09:3d:4b:7a:26:53:2c:0f:92:f8:c6:e5:2e:db:
f5:4e:1f:ea:6f:e0:8c:53:ad:40:ac:e8:d6:f8:b9:
17:47:0a:1a:02:c5:c9:bf:90:c5:62:f4:3f:4f:66:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:64:61:04:59:30:BA:37:93:3C:AD:97:CD:83:D6:12:2B:DA:A6:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:8c:2c:a4:5d:a7:04:f2:3a:dc:e7:f5:72:5e:5e:0c:8e:a2:
4f:b5:5a:31:ff:74:dc:c4:0e:55:3d:7c:80:4d:9d:f6:54:0a:
12:a9:7e:dc:f2:08:e8:8b:6b:e5:aa:0a:c6:8e:a6:17:6a:5e:
08:0b:90:8a:de:2c:98:7c:6f:62:02:2b:29:26:14:d2:1d:74:
a7:6b:d2:d5:5c:53:ea:fb:7c:53:57:76:2b:56:64:1e:a5:70:
91:d7:5f:50:c4:e8:e7:45:a8:1f:8d:ad:fd:b0:99:78:03:6b:
4a:08:40:e7:36:bd:23:47:e4:83:b8:f2:2a:ff:1d:bd:69:08:
7d:2e:79:d6:af:3b:d8:b2:7e:f7:2d:f7:22:1c:37:60:04:d6:
ff:3a:fb:f8:35:a2:c5:22:27:df:a3:ed:06:46:c0:0f:f3:d2:
0b:51:af:54:c9:98:ed:4f:76:57:c3:32:4e:f0:31:f1:f4:52:
10:33:20:a8:13:4a:86:71:0b:8d:22:99:3d:6d:6d:3e:2b:3e:
b2:53:fe:1e:b0:84:ce:d2:1b:42:ca:fc:c3:2a:a6:39:1c:27:
d2:90:b6:7d:f1:f0:f0:35:c6:01:d4:43:01:c8:87:5e:5b:cf:
b1:d7:6d:6a:4d:5e:43:7e:ac:d5:e0:c8:ee:60:d8:7b:92:95:
f0:8c:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:22 2025 by rpki-client